Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mMbqQLfvYqu1rUXJHJBG-5ApL8.roa
File:                     _mMbqQLfvYqu1rUXJHJBG-5ApL8.roa (raw, json)
Hash identifier:          lNR6C5m2Xmw+E+RzZRG8u3V3V5hVznphQiHMEbB6EQ4=
Subject key identifier:   FE:63:1B:A9:02:DF:BD:8A:AE:D6:B5:17:24:72:41:1B:EE:40:A4:BF
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       123B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mMbqQLfvYqu1rUXJHJBG-5ApL8.roa
Signing time:             Sun 01 Mar 2026 02:56:28 +0000
ROA not before:           Sun 01 Mar 2026 02:56:28 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4667 (0x123b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar  1 02:56:28 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FE631BA902DFBD8AAED6B5172472411BEE40A4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:9f:27:d2:98:c5:09:a9:97:10:97:9c:6f:
                    4f:02:97:bc:98:53:34:bd:0c:a2:89:9e:00:a6:b3:
                    7f:f7:01:2f:a3:85:12:46:e7:51:83:16:8a:ae:66:
                    cb:5e:af:e3:b1:3b:30:aa:ef:60:2e:60:03:7e:20:
                    6a:59:f6:6f:c3:66:7f:54:60:ca:89:3b:59:64:ff:
                    4a:34:09:bc:4e:d4:1a:30:42:5f:79:16:8f:5c:c9:
                    23:04:a7:9b:a0:bb:75:56:5e:48:d0:63:98:67:3c:
                    4d:e2:c7:c1:8a:be:6e:09:fb:9c:fe:e4:b0:08:e4:
                    eb:e2:8a:fa:5e:71:1c:54:82:2f:08:3e:e8:ac:5d:
                    57:a2:4f:d5:a6:ae:43:4b:e0:56:80:4d:e9:2f:09:
                    40:f5:6f:5e:14:d4:d9:4a:9a:e1:32:b2:d2:94:de:
                    26:27:67:10:39:25:5d:bb:19:06:ea:fa:3f:3e:d8:
                    23:e0:3d:56:55:15:27:67:9d:26:5d:76:8d:47:a4:
                    fd:0d:8b:ec:70:5c:55:37:ad:09:39:36:0c:c2:fd:
                    58:03:cd:93:23:07:61:93:12:0b:fd:b4:1d:43:10:
                    c8:e3:2f:7a:8d:07:0a:69:d6:62:07:48:4d:db:d9:
                    c6:00:ae:13:e5:1a:fb:42:10:c4:0f:b3:d6:65:3f:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:63:1B:A9:02:DF:BD:8A:AE:D6:B5:17:24:72:41:1B:EE:40:A4:BF
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_mMbqQLfvYqu1rUXJHJBG-5ApL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:32:26:71:4a:88:5a:a5:14:f1:07:bb:63:61:ae:0c:b9:51:
         8e:38:d9:4b:9d:ec:f6:91:53:b3:88:d0:0c:65:88:ef:24:06:
         5b:16:0a:5e:cb:75:e8:00:68:bf:83:0d:dd:33:77:bb:7f:d5:
         52:ba:ae:08:6e:7d:f5:67:f9:f1:e5:23:53:2a:da:02:13:71:
         ad:cf:dc:98:b4:4d:09:da:e8:11:e6:1a:0c:50:c1:04:e4:af:
         92:34:46:fb:3d:6b:3b:fe:b9:c2:96:c0:ef:ee:8d:23:23:80:
         c7:20:a3:0e:07:86:f7:b6:87:98:10:d1:6e:e8:b6:6e:41:3a:
         14:05:02:99:1f:76:f0:77:78:3b:f4:9e:9f:6b:67:3a:7f:4b:
         ab:a3:18:e5:f3:c8:78:e0:de:10:30:19:74:68:c6:00:e6:71:
         24:3f:ff:66:28:0a:fe:b6:0d:f6:3e:94:e9:a9:8c:40:f0:81:
         df:82:58:98:21:2b:c6:41:40:5d:b4:74:68:7e:b2:bc:45:8a:
         1c:06:8e:00:39:b8:ed:dd:74:c1:d5:46:c4:61:ad:84:b5:c4:
         28:06:95:ed:c9:6c:a5:32:c2:f2:05:d7:44:7b:f0:25:af:dc:
         41:ad:4b:24:c9:e1:52:4a:be:ab:f5:c2:50:80:b8:fd:59:7e:
         91:d5:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:48 2026 by rpki-client